$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/189553cd-8cff-3617-9ed2-625ef88c3a7e.roa File: 189553cd-8cff-3617-9ed2-625ef88c3a7e.roa (raw, json) Hash identifier: tNa9BKcEgNrFqM3raQFnJKmrkiy7x2M1bKEz2cU5WCw= Subject key identifier: A4:2B:3A:70:DD:C3:0F:AB:02:A7:E2:2F:AD:9A:BF:8C:62:49:92:50 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B8D4783E6421D2F51F3C73280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/189553cd-8cff-3617-9ed2-625ef88c3a7e.roa Signing time: Fri 17 Oct 2025 13:00:39 +0000 ROA not before: Fri 17 Oct 2025 13:00:39 +0000 ROA not after: Thu 15 Jan 2026 14:00:39 +0000 asID: 396587 IP address blocks: 192.82.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8d:47:83:e6:42:1d:2f:51:f3:c7:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 17 13:00:39 2025 GMT Not After : Jan 15 14:00:39 2026 GMT Subject: CN=3a981ac7-1c3d-4c45-9c93-794f2e3afe04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c7:4f:30:eb:35:91:50:e3:1b:0a:1b:a6:5a: fc:17:94:a4:8e:c2:b5:5b:30:b1:49:7b:64:2a:7e: eb:f6:bc:d1:ed:86:bd:80:a0:49:0b:ec:ba:7d:f4: ad:38:ba:01:1c:e4:a3:a2:b5:07:b6:be:62:09:27: d7:5d:fd:68:78:19:f0:61:6b:5f:53:6a:05:62:ae: ba:26:f6:ee:83:d5:2f:cd:94:9a:6d:6a:73:db:dd: 78:68:f4:e1:27:2c:55:2a:cc:74:0d:d1:ff:36:27: 1b:ec:db:56:60:ac:2b:32:bf:86:73:1e:99:3f:96: bd:a6:69:04:45:29:d1:58:a6:73:41:7a:dd:83:af: b0:86:5d:ab:d0:4d:bc:a6:1e:13:29:6a:87:22:47: c8:d3:28:eb:b7:8a:5e:d9:bd:fd:97:ce:bf:ff:57: 5b:55:86:3a:4b:cb:d6:cf:4a:8c:9b:df:91:37:90: 32:cf:17:e2:42:15:00:88:d5:b9:19:df:7b:60:1d: 6a:b6:e4:0a:22:d0:f0:de:ad:a6:a8:67:63:21:e5: c8:de:79:5f:55:0f:3f:0d:d4:d2:c9:00:9a:6b:25: 36:6b:19:d7:cc:7d:55:b3:01:64:7f:43:fb:67:19: b7:71:a2:fe:5c:69:a3:d3:b3:4d:42:e3:93:27:b6: e4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2B:3A:70:DD:C3:0F:AB:02:A7:E2:2F:AD:9A:BF:8C:62:49:92:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/189553cd-8cff-3617-9ed2-625ef88c3a7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.82.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:ee:4b:91:7d:4e:28:7e:f0:d5:4c:1f:47:08:48:43:05:62: 85:95:21:9e:02:45:23:af:6a:75:c8:16:da:bd:17:1e:06:07: 2c:ec:0a:ae:24:dc:39:ba:fa:a0:38:6a:c5:15:fb:a4:7a:27: dd:42:cd:95:c6:4e:4d:3f:fe:17:25:7b:c4:12:be:4d:4b:16: 04:8d:0e:12:39:0f:6d:bc:d8:82:e4:ae:35:0e:68:0c:cc:8b: 7b:9a:f0:cc:4b:53:54:ed:3c:90:0d:9b:ee:93:23:c6:00:35: e9:1e:fb:13:4e:71:fa:33:98:79:6a:78:99:b7:59:4a:e9:e2: a9:5a:05:fd:c8:14:1f:7c:52:1b:89:e1:62:f3:f0:e4:9c:78: 66:5d:74:39:75:eb:4d:ae:66:50:16:d6:f5:55:c7:9e:76:2a: 07:ea:73:ea:07:3e:76:f3:87:74:97:9f:b9:2b:6f:e6:e4:d7: b5:9a:1b:5d:ba:73:c8:41:20:f5:24:f5:9d:46:c0:42:71:71: f8:1c:5e:fe:c6:53:16:3e:77:31:44:d2:dd:1b:04:e7:76:f7: a2:ab:27:05:f9:00:75:5e:4b:c3:fc:d8:90:f9:27:ea:f7:ec: 52:29:08:7b:c2:24:38:02:62:35:0c:7a:1e:36:66:20:e3:7f: 9c:96:b7:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuNR4PmQh0vUfPHMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxNzEzMDAzOVoXDTI2MDExNTE0MDAzOVowLzEtMCsGA1UEAxMk M2E5ODFhYzctMWMzZC00YzQ1LTljOTMtNzk0ZjJlM2FmZTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsdPMOs1kVDjGwobplr8F5SkjsK1WzCxSXtk Kn7r9rzR7Ya9gKBJC+y6ffStOLoBHOSjorUHtr5iCSfXXf1oeBnwYWtfU2oFYq66 Jvbug9UvzZSabWpz2914aPThJyxVKsx0DdH/Nicb7NtWYKwrMr+Gcx6ZP5a9pmkE RSnRWKZzQXrdg6+whl2r0E28ph4TKWqHIkfI0yjrt4pe2b39l86//1dbVYY6S8vW z0qMm9+RN5AyzxfiQhUAiNW5Gd97YB1qtuQKItDw3q2mqGdjIeXI3nlfVQ8/DdTS yQCaayU2axnXzH1VswFkf0P7Zxm3caL+XGmj07NNQuOTJ7bkqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQrOnDdww+rAqfiL62av4xiSZJQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTg5NTUzY2QtOGNmZi0z NjE3LTllZDItNjI1ZWY4OGMzYTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFKGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKzuS5F9Tih+8NVMH0cISEMFYoWVIZ4CRSOvanXIFtq9Fx4GByzsCq4k 3Dm6+qA4asUV+6R6J91CzZXGTk0//hcle8QSvk1LFgSNDhI5D2282ILkrjUOaAzM i3ua8MxLU1TtPJANm+6TI8YANeke+xNOcfozmHlqeJm3WUrp4qlaBf3IFB98UhuJ 4WLz8OSceGZddDl1602uZlAW1vVVx552Kgfqc+oHPnbzh3SXn7krb+bk17WaG126 c8hBIPUk9Z1GwEJxcfgcXv7GUxY+dzFE0t0bBOd296KrJwX5AHVeS8P82JD5J+r3 7FIpCHvCJDgCYjUMeh42ZiDjf5yWtwM= -----END CERTIFICATE-----Generated at Mon Oct 20 04:01:45 2025 by rpki-client